Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/013914ac-db93-39b5-886d-89f5abbd33e9.roa
File:                     013914ac-db93-39b5-886d-89f5abbd33e9.roa (raw, json)
Hash identifier:          DHm3fYqehW8pTEnloyyooGE/AUvSW8pt6tLqnF+hx8U=
Subject key identifier:   79:73:03:46:3A:68:56:A7:34:68:FF:38:18:74:AE:89:60:C5:33:BE
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5011A2C6720D9D8C460F00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/013914ac-db93-39b5-886d-89f5abbd33e9.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        74.216.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:11:a2:c6:72:0d:9d:8c:46:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=d0979e0e-0a6a-43c1-a1ab-cb378defee65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:8d:30:a1:17:d5:88:8f:63:a6:22:de:51:
                    ad:45:62:dc:4b:19:8d:88:b7:37:2f:fd:0a:a1:34:
                    76:89:f2:21:3b:cb:f5:2c:73:f9:c3:bc:d7:56:66:
                    81:83:bd:64:ec:6b:ef:10:33:03:62:c5:3b:62:f7:
                    43:90:c9:9b:45:1a:08:48:b4:88:ef:1d:49:b7:61:
                    6c:79:33:f6:22:b5:71:51:7b:cb:c8:8d:59:36:8f:
                    c5:56:82:9c:3f:f8:76:92:5f:fc:34:6f:08:dc:a2:
                    8d:ab:9c:6c:75:00:69:66:30:88:ad:81:d1:45:b4:
                    06:4b:4f:c2:a0:e2:f1:15:17:63:3d:07:91:8b:c8:
                    78:22:86:69:62:ac:80:d3:e9:df:6d:1f:ba:89:95:
                    71:01:cd:af:01:9d:23:d9:6a:d3:aa:52:5e:bb:08:
                    f3:a2:f6:ea:68:2a:93:3a:bd:b1:f1:29:85:5e:af:
                    5a:1d:0e:d3:64:23:c6:cd:8b:c6:24:a7:0d:8e:f6:
                    e0:26:9d:04:33:dc:0a:99:d2:24:c6:57:10:20:8d:
                    96:10:93:29:b7:04:80:49:e8:e2:09:51:80:97:ca:
                    fd:6f:de:0f:6a:74:9a:f4:ff:25:75:da:c9:04:33:
                    ed:03:a2:51:5e:ea:37:65:a7:6f:80:d1:af:1a:a8:
                    53:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:73:03:46:3A:68:56:A7:34:68:FF:38:18:74:AE:89:60:C5:33:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/013914ac-db93-39b5-886d-89f5abbd33e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.216.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d4:5e:33:48:f3:99:55:5c:4d:21:0d:5c:95:cb:4f:ab:a4:
         dc:ee:f0:eb:99:bb:9a:77:f3:6c:e6:7b:55:4a:3a:22:45:3b:
         f5:b5:06:4e:79:83:46:24:72:7c:f5:f3:20:8e:f1:e0:db:62:
         65:db:42:2c:77:74:70:de:02:2a:dd:3f:e3:35:53:0d:2c:c6:
         91:e0:78:c4:72:96:67:91:b0:08:a0:a6:d8:1a:55:d9:03:35:
         8f:27:95:93:69:a4:4f:65:08:26:e0:78:ae:10:7b:bf:7e:bc:
         f2:e5:40:6b:95:16:fe:96:47:da:15:8b:4b:00:8b:61:4a:52:
         f8:4d:50:2b:c8:c4:04:31:8f:33:a1:49:80:4b:52:68:a4:22:
         d9:0c:25:14:9b:77:ea:09:58:db:51:ab:6c:e4:34:9f:78:e6:
         cf:d9:93:08:79:ab:03:7b:a1:fd:74:ac:03:d2:da:9e:49:8b:
         8b:6d:3a:80:7f:d4:91:18:67:ac:38:06:a8:11:db:f9:da:37:
         27:e1:da:c9:2c:83:75:f3:28:cc:08:28:1d:4d:63:53:69:a8:
         a2:07:1a:a1:b6:47:d9:9b:77:39:e7:00:f4:24:8e:ae:83:88:
         db:61:a1:e1:83:8d:a7:e9:93:93:7d:4f:c7:2f:a4:e9:c8:10:
         f3:d0:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:09 2025 by rpki-client